This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          IigXRIF2Rh2ERgm2YW03o/1vyHAz6aK1pej49hs4608=
Subject key identifier:   99:7D:8B:A9:3B:5E:42:6B:7A:3B:8C:CC:04:49:FB:C3:9D:14:57:2E
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       019BF5AC588999814E83491F92DA854225B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          05F6
Signing time:             Sun 25 Jan 2026 15:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:11 +0000
Files and hashes:         1: FyBdBnnCpKvwLLKFiribJRB37w4.roa (hash: 5DLx1xDcX045/FKz8VI0Qh7oVFbB+uzkeft+z/1uHvI=)
                          2: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: RvZiYTwEsLPZow9WJyktEeSmPeFd6EGH7nNcsXtq+DA=)
                          3: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
                          4: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:58:89:99:81:4e:83:49:1f:92:da:85:42:25:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Jan 25 15:01:11 2026 GMT
            Not After : Jan 26 15:01:11 2026 GMT
        Subject: CN=997d8ba93b5e426b7a3b8ccc0449fbc39d14572e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:72:dd:a9:ef:cf:58:0f:c0:73:c8:f6:d1:
                    47:8b:21:d1:a9:ea:c1:0e:df:ac:54:94:7d:c6:65:
                    ad:57:4e:40:1d:2f:a8:b0:f5:7c:8c:a7:cc:74:e6:
                    c0:f4:a5:c3:6b:be:c0:61:25:3e:91:f9:86:1e:9b:
                    e0:9a:3e:00:75:82:ca:36:f6:f6:99:f5:d3:85:73:
                    ea:0b:0a:07:bc:b8:6b:ff:0d:4a:56:46:ed:71:3a:
                    d2:73:77:1a:db:6f:35:bc:ef:2d:5c:9e:1c:42:75:
                    de:17:66:25:ce:6f:9e:71:f6:63:df:d3:6c:a5:66:
                    b7:6e:65:cb:5b:d8:ab:a4:ff:ff:0c:b0:f8:8e:ae:
                    9f:14:96:2d:90:2c:16:b3:56:92:77:de:72:e2:38:
                    9d:71:d0:f5:43:61:31:8b:e2:20:1c:39:52:03:79:
                    fe:1d:a5:dd:c5:fd:74:c3:e8:ea:0c:4f:8d:a6:6a:
                    50:9b:cd:e1:7e:cf:b5:65:df:77:ca:d2:9b:00:65:
                    be:ff:f6:19:ad:6c:97:9c:28:f8:fa:a0:ff:d3:bb:
                    e3:3e:af:20:41:4f:77:e8:0e:57:88:c4:ee:03:9f:
                    c9:3e:45:75:d0:49:37:7a:d2:ed:3f:03:5b:91:ea:
                    f1:7a:89:71:b5:9c:dc:c0:21:07:4e:55:e5:d7:fa:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:8B:A9:3B:5E:42:6B:7A:3B:8C:CC:04:49:FB:C3:9D:14:57:2E
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:0e:50:77:d2:47:54:84:6a:b9:29:0a:6f:41:7f:e6:63:
         9b:07:d4:7a:fc:a9:95:50:60:67:2c:92:b3:ae:18:a4:75:b1:
         21:da:02:29:d8:0e:65:23:75:c0:06:5e:a6:4c:3f:45:f5:d9:
         c6:0e:14:46:ff:92:3b:23:87:c3:7e:41:97:ed:6f:f8:9d:dd:
         89:2f:57:ae:9c:8a:20:c9:ae:87:d0:0c:27:a7:29:32:08:5d:
         c6:7d:fd:bd:03:37:31:ae:72:ed:be:c7:89:c1:b3:e1:09:a4:
         2d:a5:9f:46:7c:b9:51:0f:54:e1:38:be:a5:ee:8d:32:d6:1f:
         60:12:1d:33:0b:60:ba:56:4c:2a:1b:79:58:e9:af:05:5a:e3:
         27:9e:40:8b:d5:3e:d2:ca:30:c6:02:2e:3e:52:f2:9d:8b:cc:
         0f:b3:8f:2a:2c:5f:f4:48:38:80:42:ea:fb:70:de:f4:23:9a:
         e8:82:aa:47:3e:56:c3:73:89:49:79:86:76:7c:9a:db:3d:dc:
         23:9d:72:f5:77:a5:8a:df:0d:48:a2:b9:35:95:6e:d7:cc:77:
         9d:e1:42:a5:61:91:30:35:fe:1b:5c:87:9c:36:79:13:20:32:
         2c:39:5c:d3:d8:87:d7:0e:15:52:78:72:79:75:e3:e8:9c:86:
         53:c6:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:16 2026 by rpki-client